Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Attackers are exploiting CVE-2026-64849 in MLflow, an open-source AI platform, using a flaw in its model-registry webhooks to proxy requests through affected systems and reach cloud metadata services, with watchTowr detecting indiscriminate scanning within...